Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20323130373033.roa
File:                     3135372e3235342e3232362e302f32342d3234203d3e20323130373033.roa (raw, json)
Hash identifier:          lGGkHwiSQX5lw5vfCTwpVAkzhaSQpue6xqMYeniKFU4=
Subject key identifier:   03:B7:11:06:7A:1D:FF:A0:01:B9:EF:E7:E8:FB:3F:23:1A:03:62:8D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4C2CA3C7ABA243DBBF0D0C7FC785D09DA4A20268
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20323130373033.roa
Signing time:             Fri 30 Dec 2022 19:54:21 +0000
ROA not before:           Fri 30 Dec 2022 19:49:21 +0000
ROA not after:            Fri 29 Dec 2023 19:54:21 +0000
asID:                     210703
IP address blocks:        157.254.226.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2c:a3:c7:ab:a2:43:db:bf:0d:0c:7f:c7:85:d0:9d:a4:a2:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Dec 30 19:49:21 2022 GMT
            Not After : Dec 29 19:54:21 2023 GMT
        Subject: CN=03B711067A1DFFA001B9EFE7E8FB3F231A03628D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:08:83:0f:cc:06:81:4f:ad:05:4a:6e:46:
                    60:6b:20:f9:88:49:54:32:bc:39:50:5c:ca:c6:d7:
                    b1:d9:1a:8b:10:87:d8:1b:12:0e:df:10:8b:8b:b2:
                    4b:80:ed:82:18:1b:3e:2d:89:e7:f9:7b:67:79:02:
                    c6:b2:5d:da:f6:51:14:6b:64:73:f9:a7:3e:3c:4e:
                    6a:6a:a4:ab:69:72:be:02:80:8f:87:8c:c4:99:b1:
                    5e:bf:40:82:9c:d6:06:76:b6:83:34:81:db:2a:95:
                    bb:05:53:b0:f7:3d:8a:21:44:72:71:f7:4c:c6:97:
                    cd:12:cf:7c:64:3f:72:8f:cf:29:50:d8:ff:d2:db:
                    24:f7:13:0f:92:1b:ce:70:73:5f:3d:23:04:dc:a2:
                    98:a6:1f:b1:16:3e:5e:88:7d:1e:83:26:71:2d:c0:
                    6f:57:dc:c0:de:74:ed:11:99:4c:98:09:3f:91:ff:
                    72:24:b1:95:6b:00:a6:41:90:78:a8:cf:51:20:22:
                    4b:11:42:17:3a:fd:17:5c:0e:da:11:af:f7:d6:b9:
                    89:2a:d5:b1:cd:ae:2b:fb:14:1c:a7:31:76:bd:da:
                    c7:89:65:89:ad:20:be:ab:ce:60:66:48:1f:ea:88:
                    6d:0c:03:52:90:1c:52:84:a5:85:a1:d3:be:1b:4d:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:11:06:7A:1D:FF:A0:01:B9:EF:E7:E8:FB:3F:23:1A:03:62:8D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3232362e302f32342d3234203d3e20323130373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:09:81:ca:b4:aa:67:8f:56:9b:6f:db:4e:42:0e:0f:bb:
         c8:db:a4:40:af:ff:3f:85:98:ed:4e:fd:2a:40:2e:e2:80:9e:
         74:fd:1c:35:97:5b:3d:56:96:89:16:f3:24:f7:15:ad:50:40:
         a3:d0:f7:75:8b:2b:50:d7:f7:11:86:db:1e:8e:61:4b:a7:59:
         0e:b7:3b:55:3b:ef:1c:c5:48:c8:d3:d1:f8:e2:d2:70:ab:d4:
         56:f2:36:92:2b:7b:90:f3:98:a9:1c:cf:5e:6f:a4:1c:50:0c:
         bb:a7:81:df:60:49:65:bb:ea:de:d6:1f:b8:8b:83:3a:29:f4:
         9e:e7:ed:95:83:db:c6:50:e1:71:f0:27:82:f7:ba:dd:43:cf:
         e0:dd:92:f2:20:73:e0:db:7d:3a:08:c1:40:3c:da:11:1e:4c:
         a4:d0:a2:3e:e4:bc:e9:3c:fd:54:fe:85:82:35:b9:a3:7a:31:
         26:f2:6d:d1:e3:ed:e8:ea:32:12:c0:4c:be:6e:96:29:6c:22:
         1e:7e:44:38:c0:db:c0:7d:98:8c:88:01:f0:e4:4f:42:50:6a:
         60:52:ef:26:50:c6:de:44:79:64:45:da:97:aa:1e:e2:a0:8a:
         94:81:38:a8:8b:d8:d8:bb:83:a1:62:51:4b:9f:cf:68:6b:22:
         f5:8e:5c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org